13 matches found
SUSE CVE-2014-7812
Cross-site scripting XSS vulnerability in Spacewalk and Red Hat Network RHN Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field...
cups: Local privilege escalation to root due to insecure environment variable handling
It was discovered that CUPS allows non-root users to pass environment variables to CUPS backends. Affected backends use attacker-controlled environment variables without proper sanitization. A local attacker, who is part of one of the groups specified in the SystemGroups directive, could use the...
Linux: Read /etc/group (KB)
The /etc/group file is a text file that defines the groups on the system. There is one entry per line, with the following format: - groupname:password:GID:userlist Note: This script only stores information for other Policy Controls. Copyright C 2020 Greenbone Networks GmbH Some text descriptions...
Red Hat Satellite and Spacewalk Cross-Site Scripting Vulnerability (CNVD-2015-03621)
Red Hat Network Satellite RHN Satellite, Red Hat Network Satellite is the United States Red Hat Red Hat company's set of system management platform. spacewalk is based on the Red Hat Network Satellite and the development of a set of open source Linux system management solutions. A cross-site...
CVE-2014-7812
Cross-site scripting XSS vulnerability in Spacewalk and Red Hat Network RHN Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field...
Cross site scripting
Cross-site scripting XSS vulnerability in Spacewalk and Red Hat Network RHN Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field...
CVE-2014-7812
CVE-2014-7812 is an XSS vulnerability affecting Spacewalk and Red Hat Network Satellite prior to version 5.7.0. The issue allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field. Affected products include Spacewalk and RHN Satellite (before 5.7.0); rem...
CVE-2014-7812
Cross-site scripting XSS vulnerability in Spacewalk and Red Hat Network RHN Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field...
Spacewalk: XSS in system-group
Cross-site scripting XSS vulnerability in Spacewalk and Red Hat Network RHN Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field...
Debian Security Advisory DSA 1776-1 (slurm-llnl)
The remote host is missing an update to slurm-llnl announced via advisory DSA 1776-1. OpenVAS Vulnerability Test $Id: deb17761.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1776-1 slurm-llnl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
DSA-1776-1 slurm-llnl - privilege escalation
Bulletin has no description...
PT-2009-1078 · Sudo +1 · Sudo +1
Name of the Vulnerable Software and Affected Versions: sudo versions 1.6.9p17 through 1.6.9p19 Description: The issue concerns the improper interpretation of a system group in the sudoers file during authorization decisions for users belonging to that group. This allows local users to leverage an...
MacOS X at scheduling utilities privelege escalation
During execution of user's batch job system groups membership is not dropped...